STIGQter: STIG Summary: Red Hat Ansible Automation Controller Web Server Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 05 Jan 2026:

All accounts installed with the Automation Controller NGINX web server's software and tools must have passwords assigned and default passwords changed.

DISA Rule

SV-256967r961863_rule

Vulnerability Number

V-256967

Group Title

SRG-APP-000516-WSR-000079

Rule Version

APWS-AT-000950

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

As a System Administrator for each Automation Controller NGINX web server host, change the NGINX account to disallow interactive login:

$ usermod -s /sbin/nologin nginx

Check Contents

As a System Administrator for each Automation Controller NGINX web server host, verify the NGINX account is configured to disallow interactive login"

grep '^nginx.*\(/sbin/nologin$\|/bin/false$\)' /etc/passwd

If "FAILED" is displayed, this is a finding.

Vulnerability Number

V-256967

Documentable

False

Rule Version

APWS-AT-000950

Severity Override Guidance

As a System Administrator for each Automation Controller NGINX web server host, verify the NGINX account is configured to disallow interactive login"

grep '^nginx.*\(/sbin/nologin$\|/bin/false$\)' /etc/passwd

If "FAILED" is displayed, this is a finding.

Check Content Reference

M

Target Key

5535